Re: 2003 chkdsk

barry wrote: 
Hi,

This is actually a 2003 server, but I cant find the newsgroup.

I'm implementing a new file server, and have been sorting out the permission for user directories, departments etc etc. I ran a checkdsk on the volume, this ran, and replaced "invalid security id with default security id" for about 600,000 files. What exactly does it determine as "invalid security"? It was working fine until I ran check disk. Obviously the default security is rather locked down, and denies all my users from accessing their files. After a few hours of messing, I eventually sorted it (that and I had a script to do half the work anyway). The script just sets the owner of files in their user directory (using subinacl), and gives them full control to anythgin in their user directory. If its relevant I can copy the code.

I've just run another chkdsk (without /f!!) and its come up with a load more "invalid security IDs".

what doesn't it like??

Does anyone know of any program that can 'back up' the security settings on files so that if this happens again - presumably when i next chkdsk /f, I can just restore them?

Thanks
Barry



right, after mucho faffing around, I've come top the conclusion that its the setowner switch of subinacl (version is 5.2.3790.1180). It worked for the first few users (i cancelled my script and did a chkdsk). I then did all of them and im getting the invalid security ID errors. Though permissions look fine and its all workign nice.

Heres the script snippet. Theres a 5 second lag between each iteration. Which incidentally isnt always long enough so that there's only one subinacl running.

objShell.Run "cmd /c " &chr(34)& " subinacl.exe /subdirectories E:\F_APPS\users\"&f1.name&"\* /setowner="&f1.name&"@mynicedomain.com"&chr(34) &""

I even stopped the AV scanner as I thought this might be it. It wasnt.

Anyone any ideas?


I've now altered the script so as to not run more than one copy of subinacl, on the off chance that makes a difference. Obviously now I've gotta go back and chkdsk the server and mess around for a few hours again sporting its permissions out. I can't be bothered as its saturday and i need to buy some food :)
.

Relevant Pages

  • Re: List View: Calculate all sizes Default?
    ... folders in other views. ... I don't use the Finder very often - I launch apps from ... I rarely use that script. ... What if I used EasyFind to find every .DS_Store file in my user directory, ...
    (comp.sys.mac.system)
  • chkdks / resetting security
    ... I'm implementing a new file server, and have been sorting out the permission ... What exactly does it determine as "invalid security"? ... in their user directory, and gives them full control to ... I've just run another chkdsk and its come up with a load more ...
    (microsoft.public.win2000.security)
  • Re: Assigning Printers w/ GPO per machine - Workaround
    ... solution is to use the login script to get the computer name and set ... Here is a copy of my login script: ... Find the default user directory and give everyone permission. ... The problem with the default user profile ...
    (microsoft.public.win2000.group_policy)
  • 2003 chkdsk
    ... I ran a checkdsk on the volume, this ran, and replaced "invalid security id with default security id" for about 600,000 files. ... The script just sets the owner of files in their user directory, and gives them full control to anythgin in their user directory. ... Does anyone know of any program that can 'back up' the security settings on files so that if this happens again - presumably when i next chkdsk ...
    (microsoft.public.win2000.file_system)
  • RE: Cant detect the network printer
    ... you can create a script and run it at logon, besides that the only thing you can do is install the printer to the default user directory and blow out your profiles. ...
    (microsoft.public.win2000.networking)